ICE Holds $2M Contract for Zero-Click Phone Spyware, Records Show

·1 views

U.S. Immigration and Customs Enforcement (ICE) has a $2 million contract for spyware capable of hacking into mobile phones without any interaction from the target user. The technology, known as zero-click spyware, can silently infiltrate devices without requiring the victim to tap a link or open a file. The contract raises significant concerns among privacy advocates about the scope of surveillance tools available to domestic law enforcement agencies. Details of the agreement were surfaced through procurement records reviewed by reporters. The revelation adds to growing scrutiny over the use of advanced commercial spyware by U.S. federal agencies.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why navigator.clipboard.writeText() Silently Fails When Users Switch Tabs

A subtle browser behavior can cause clipboard copy functions to fail without any visible error when users switch tabs or windows mid-operation. The Async Clipboard API requires the document to have active focus at the exact moment writeText() is called, not merely when the user first clicked. If an awaited operation — such as a fetch request — creates a timing gap between the click and the clipboard call, focus may have shifted, causing the browser to silently reject the promise with a NotAllowedError. Common fixes like loading spinners, try/catch blocks, or retries do not resolve the issue because they fail to address the root cause of lost document focus. The recommended solution is to pass a promise directly into ClipboardItem so the clipboard slot is claimed during the original click gesture, while the data resolves asynchronously afterward.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GPT4All Lets You Run AI Language Models Locally Without Internet Access

GPT4All is a free, open-source desktop application that allows users to run large language models locally on Windows, macOS, and Linux without an internet connection. It supports GGUF-format models from sources like Hugging Face and can also connect to API-based providers such as OpenAI, Groq, and Mistral. The application can be installed on Ubuntu and Debian-based systems via an installation binary or Flatpak, while Windows and macOS users have dedicated installers available. GPT4All also supports retrieval-augmented generation (RAG), enabling users to chat with their own local documents. Additionally, it includes a built-in API server that can be secured and made remotely accessible via HTTPS behind a reverse proxy.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

NVIDIA Dynamo and vLLM Enable Scalable LLM Inference Across Multi-GPU Setups

NVIDIA Dynamo is an open-source inference framework designed to deploy large-scale generative AI models across multi-node, multi-GPU environments with high throughput and low latency. It supports both aggregated serving for single-GPU configurations and disaggregated serving, which separates prompt processing and response generation across different GPUs for independent optimization. The framework integrates with backends such as vLLM, SGLang, and NVIDIA TensorRT-LLM, using etcd for service discovery and NATS for inter-component message passing. A deployment guide covers infrastructure setup, container configuration via Docker Compose, and two serving patterns using vLLM as the inference backend. The setup requires a minimum of one GPU for aggregated serving and four GPUs for disaggregated serving, along with the NVIDIA Container Toolkit and Docker Engine.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Deploy FastAPI with Gunicorn and Nginx on Ubuntu 24.04

A technical guide outlines the steps to deploy a FastAPI application on Ubuntu 24.04 using Gunicorn as the application server and Nginx as a reverse proxy. FastAPI, a modern Python web framework, supports asynchronous programming and ships with built-in interactive API documentation via Swagger UI. The setup uses Gunicorn with a Uvicorn worker class to handle ASGI support, while a systemd unit file manages the Gunicorn process as a persistent background service. Nginx sits in front of the application to handle incoming web traffic and route requests through a Unix socket. The deployment is completed by securing the application with a free SSL certificate, making it accessible over HTTPS on a custom domain.

0 comments Read more at DEV Community